Netatalk vulnerability in QNAP and Synology NAS systems

The Netatalk security vulnerability in Apple’s network protocol continues to spread. QNAP and Synology NAS devices are also affected by the vulnerability. A first update has already been released.

Netatalk security vulnerabilities also affect NAS

Thanks to Netatalk, network devices from manufacturers QNAP and Synology are able to support Apple’s network protocols. Using an outdated version, hackers gain access to the systems and are able to inject critical malicious code.

Both manufacturers have released new updates for their operating systems this week. After QNAP at the beginning of the week, Synology has now also reacted and launched a new update of the Disk Station Manager (DSM) software used. In an announcement, the manufacturer reveals that the DSM 6.2, 7.0 and 7.1 software versions are affected by the critical security vulnerability. VS Firmware 2.3 and Synology Router Manager (SRM) 1.2 are also potentially at risk.

For Disk Station Manager 7.1, the manufacturer has already made an updated version with the number 7.1-42661-1 available for download free of charge. For the other affected variants, updates are being worked on at full speed and should be available shortly.

The download directory of the current update contains several .pat files for the respective Synology models, which can be easily installed in the user interface of the NAS devices for users with administrator rights via the item for a manual DSM update.